Copyright © 2003 DMTFPage 1 Overlap of Concepts between GGF DAIS Specs and the DMTF CIM Schema CIM System/Devices, Application, User/Security and Database Models October 8, 2003 Author: Andrea Westerinen DMTF VP of Technology

Copyright © 2003 DMTFPage 2 Agenda GGF DAIS Scenarios and DMTF CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model User and Security Model Next Steps

Copyright © 2003 DMTFPage 3 Complementary WG Charters GGF DAIS Charter: –“… Promote standards for the development of grid database services, focusing principally on providing consistent access to existing, autonomously managed databases” DMTF CIM Database WG Charter: –“… Define the information model that characterizes the common properties and services performed by a database. This includes both the inventory (static database properties, parameter settings, resource limits, features available/used) and behavioral (event, state, rules, and methods) attributes.”

Copyright © 2003 DMTFPage 4 DAIS Scenarios and CIM Discovering a database –Instance of a CIM_DatabaseSystem (a subclass of CIM_ApplicationSystem) with supporting CIM_DatabaseServices Provisioning a database system –Result of a “create database” -> An instance of CIM_CommonDatabase –Tables are not currently modeled but are a future activity of the Database WG

Copyright © 2003 DMTFPage 5 DAIS Scenarios and CIM Locating a suitable database system and defining the necessary tables –Locate database by checking associated CIM_CommonDatabaseStatistics Starting up and shutting down a system –Use the RequestStateChange method on CIM_EnabledLogicalElement that is inherited by all systems and services

Copyright © 2003 DMTFPage 6 But there is more ….

Copyright © 2003 DMTFPage 7 Other DAIS Concepts in CIM Product information in CIM_Product class Software features in CIM_SoftwareFeature class –SoftwareFeatures related to Products Capabilities as subclasses of the abstract CIM_Capabilities class Concepts of state and status inherited from CIM_ManagedElement and CIM_EnabledLogicalElement

Copyright © 2003 DMTFPage 8 Other DAIS Concepts in CIM Concept of CIM_OrganizationalEntity (orgs, org units and user contacts) in the CIM User and Security Model Also modeled, CIM_Credentials, CIM_Identity (i.e., a security principal) and RBAC (via CIM_Privilege, CIM_Role and policy)

Copyright © 2003 DMTFPage 9 Agenda DAIS Scenarios and CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model User and Security Model Next Steps

Copyright © 2003 DMTFPage 10 Storage Aspects Addressed by CIM File/record layer Block layer Storage devices (disks, …) Database (dbms) File system (FS) Network Host Device Block aggregation Application Services Discovery, monitoring Resource mgmt, configuration Security, billing Redundancy mgmt (backup, …) High availability (fail-over, …) Capacity planning

Copyright © 2003 DMTFPage 11 Storage and File Concepts CIM_StorageExtent is the high level class representing any storage CIM_StorageVolume describes storage that is presented to an OS (for ex, by a hardware RAID cabinet), or to a File System (for ex, by a software volume manager) StorageVolumes can be based on (assembled from) lower level StorageExtents

Copyright © 2003 DMTFPage 12 Storage and File Concepts CIM_FileSystem and CIM_LogicalFile define the base file system concepts FileSystems reside on storage, as indicated by the CIM_ResidesOnExtent association LogicalFiles are located in FileSystems and are of various types – Directory, Data, Device (describing devices accessed via a byte stream I/O model), FIFOPipe, or SymbolicLink File sharing and import (across systems) also described

Copyright © 2003 DMTFPage 13 Agenda DAIS Scenarios and CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model User and Security Model Next Steps

Copyright © 2003 DMTFPage 14 Applications Model Overview Sub-Models: –Application Lifecycle Model (Deployment) –Application Runtime Model –J2EE Application Server Model –Management and State –Metrics

Copyright © 2003 DMTFPage 15 Application Model Overview Software Feature Application System Core Model Application Model ProductSoftwareFeature ApplicationSystemSoftwareFeature SoftwareFeatureSoftwareElements Software Element ProductService Unit of Component Management Unit of Acquisition Unit of Deployment Execution Service Collect Features into Business System

Copyright © 2003 DMTFPage 16 Breaking Down the Model: Runtime Sub-Models

Copyright © 2003 DMTFPage 17 Mapping the Runtime into CIM SW Feature/ SW Element Structure Application System Sub-Model Principal Management Object Class Configuration Setting External System System, Service, Resource, SWF/SWE Function Application Service Resource UoW (Action) Data Event Indication inter- acts with consists ofprovides performsdetermines dataflow emits applies imple- ments Perfor- mance metrics Status Errors Metrics per individual action Analysis Overview, Monitoring Statistics, Summary, Aggre- gations Runtime Model History Metrics, Statistics stores behavior of the past Support Object Class CIM Class Representing a Managed Object

Copyright © 2003 DMTFPage 18 Modeling FCAPS Aspects of Applications Fault –Indications –Error and status properties (counter, information) –Log-entries, traces, etc. Performance –Base metrics (IO, timebound metrics, etc.) –UoW –Metric properties –Statistics Configuration –Persistent configuration information: configuration, settings –Control: methods –Current configuration: object properties, support classes, associations

Copyright © 2003 DMTFPage 19 Agenda DAIS Scenarios and CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model User and Security Model Next Steps

Copyright © 2003 DMTFPage 20 Database Model Overview Common Database Services Config Params Database System Database Users DBA Database Files Database Files Database Storage 3 Level Model for a database environment: - Database system software - Common database entity - Database services - Entities that perform tasks for the database, such as coordinating user access

Copyright © 2003 DMTFPage 21 Current Database WG Activities Work with the Application WG to refine application runtime to better address database environment Database clustering Extend concepts from other models to cover Database Users, Listeners, and other relevant database management entities Define inter-model relationships needed to support capabilities such as provisioning and inventory management

Copyright © 2003 DMTFPage 22 Agenda DAIS Scenarios and CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model User and Security Model Next Steps

Copyright © 2003 DMTFPage 23 User/Security Model Overview

Copyright © 2003 DMTFPage 24 CIM_Credential Defines materials, information, or other data which is used to prove something, such as establishing identity Types of Credentials: –Shared Secret –Kerberos Ticket –Public Key (Self-issued, CA) –Biometrics –… Authentication “Service” validates Credential

Copyright © 2003 DMTFPage 25 CIM_Identity Represents a security principal Entity “behind” an Identity can be user, organizational, services, systems, … (AssignedIdentity) –Entity may have multiple Identities Within a given security context: –Identity has a level of trust (SecuritySensitivity) –Whether an Identity is currently authenticated must be established and removed (CurrentlyAuthenticated boolean) by the security infrastructure

Copyright © 2003 DMTFPage 26 Identity (Continued) Conditions which must be met in order for an Identity to be authenticated are defined using “policy” –Allow different alternatives/combinations of Credentials to establish Identity –For ex, birth certificate and driver’s licence OR passport Identity object may not be authenticated, but instance valid for audit/accounting

Copyright © 2003 DMTFPage 27 CIM_Privilege and CIM_Role Privilege: –Types of activities which are granted or denied (PrivilegeGranted boolean) –“General” activities – Create, Delete, Detect, Read, Write, Execute –Any Privileges not specifically granted MUST be denied –An explicit deny takes precedence over any granted Privileges Role: –Collection of privileges and/or other roles –Allowing definition of role hierarchies

Copyright © 2003 DMTFPage 28 Agenda DAIS Scenarios and CIM System/Devices Model for Storage and Files Application Model for Deployment and Runtime Database Model Next Steps

Copyright © 2003 DMTFPage 29 Next Steps Define mapping of DAIS concepts to CIM Where specific mappings exist, reuse the CIM classes Where mappings do not exist, extend the models –Model development is on-going and driven by the needs of DMTF members and partners